1. Who we are
PitchMe Corp Limited ("PitchMe", "we", "us") is a company registered in England and Wales, company number 11052281, with its registered office at 8 Devonshire Square, London, England, EC2M 4YJ. We are the data controller for the personal data described in this policy, except where we state that we act as a processor for a customer.
We are registered with the Information Commissioner's Office under registration number ZC230559.
Contact: info@pitchme.co
2. What this policy covers
PitchMe operates a data enrichment and talent intelligence platform used by recruitment and staffing organisations. This policy explains how we handle personal data in three distinct situations:
(a) Visitors and account holders. People who use pitchme.co or hold a PitchMe account.
(b) Professionals and candidates in our platform. People whose professional information appears in our platform because we obtained it from public sources or licensed data providers. Most people covered by this policy fall into this group, and you will not have given us your information directly. Section 4 explains where it came from and what rights you have.
(c) Our customers' personnel. Employees of the organisations that use our service.
Where we process personal data on a customer's documented instructions — for example, when a staffing agency uploads its own candidate records for enrichment — that customer is the controller and we act as their processor. Our processing in that role is governed by our agreement with them, and requests should be directed to that organisation. We will assist them in responding.
3. Personal data we collect
From you directly: name, email address, telephone number, postal address, job title, employer, employment history, education history, professional summary, account credentials, and any content you submit or upload.
Automatically when you use the Site: IP address, device and browser type, operating system, referring and exit pages, timestamps and interaction data. See section 13 on cookies.
From third parties: professional profile information from licensed data providers and public sources, as described in section 4. Billing information from our payment processor.
We do not collect special category data as defined in Article 9 UK GDPR, and ask that you do not submit it.
Where we produce aggregated or statistical outputs that cannot be linked back to any individual, that information is anonymised and is no longer personal data. Removing a name alone does not achieve this, and data from which an individual could still be identified remains subject to this policy.
4. Where professional and candidate information comes from
(This section is our notice under Article 14 UK GDPR, for people whose data we did not obtain from them directly.)
If your professional information appears in the PitchMe platform, we obtained it from one or more of the following:
Publicly available professional sources, including public professional profiles, employer careers pages, published job postings, and public professional registries.
Licensed third-party data providers. We license professional contact and employment information from specialist B2B data providers. On request we will tell you which provider supplied the record relating to you, unless we are contractually or legally prevented from doing so, in which case we will tell you that and explain why.
Our customers, where a recruitment or staffing organisation has provided us with candidate records for enrichment. In that case the organisation is the controller and we act on its instructions.
Categories of data involved: name, professional title, employer and employment history, education, professional skills and qualifications, business contact details, and public professional profile links.
Our lawful basis for this processing is legitimate interests under Article 6(1)(f) — see section 5. We have carried out and documented a legitimate interests assessment, and will provide a copy on request.
You have the right to object to this processing at any time, and to request erasure. Contact info@pitchme.co. Where you object, we will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests. We maintain a suppression list and will propagate your request to the data providers concerned.
5. Why we process personal data, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Provide the Site and Service to account holders; administer accounts; provide support | Performance of a contract, Art. 6(1)(b) |
| Take payment and maintain financial records | Contract, Art. 6(1)(b), and legal obligation, Art. 6(1)(c) |
| Compile, enrich and maintain professional profile information within the platform | Legitimate interests, Art. 6(1)(f) — operating a professional data service and helping employers and candidates find each other |
| Make enriched professional information available to customers for recruitment purposes | Legitimate interests, Art. 6(1)(f) |
| Secure and monitor the Site and Service; prevent fraud and misuse | Legitimate interests, Art. 6(1)(f) — protecting our service and its users |
| Analyse usage and improve the Site and Service | Legitimate interests, Art. 6(1)(f) |
| Send marketing communications to business contacts | Legitimate interests, Art. 6(1)(f), subject to PECR; consent where required |
| Set non-essential cookies | Consent, Art. 6(1)(a) and PECR reg. 6 |
| Respond to legal requests and comply with regulatory obligations | Legal obligation, Art. 6(1)(c) |
Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms, and we keep that assessment on record. You can request it, and you can object to the processing.
Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing carried out before you withdrew.
6. Marketing
We send marketing communications to business contacts where we are permitted to do so, and to individuals who have consented. Every marketing message contains an unsubscribe link, and you can opt out at any time by using it or by contacting info@pitchme.co. Opting out of marketing does not stop service messages such as security notices or changes to our terms.
7. Who we share personal data with
Professional advisers. Lawyers, accountants and auditors, under duties of confidentiality.
Legal and regulatory. Where we are required to disclose by law, court order or a regulator, or where disclosure is necessary to establish, exercise or defend legal claims.
Corporate transactions. In connection with a merger, acquisition, financing or sale of assets, personal data may be disclosed to the counterparty and its advisers, subject to confidentiality obligations. Any recipient will be bound to handle it consistently with this policy.
We do not sell personal data.
8. International transfers
We are based in the United Kingdom. Some of our service providers and data providers are located outside the UK, including in the United States and the European Economic Area.
Transfers to countries covered by UK adequacy regulations, including EEA member states, are made on the basis of that adequacy.
For transfers to countries not covered by adequacy regulations, we put in place one of the safeguards permitted under Article 46 UK GDPR — in practice the ICO's International Data Transfer Agreement, or the EU Standard Contractual Clauses together with the ICO's UK International Data Transfer Addendum — supported by a transfer risk assessment. You may request a copy of the relevant safeguard by contacting info@pitchme.co.
9. Security
We maintain technical and organisational measures appropriate to the risk, including encryption in transit and at rest, role-based access control on a least-privilege basis, access logging and review, secure development practices, vulnerability management, and an incident response process. We require our service providers to maintain equivalent measures.
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours where required, and will notify you directly where the risk is high.
10. Your rights
You have the right to:
Be informed about how we use your personal data — this policy.
Access the personal data we hold about you, and receive a copy.
Rectification of inaccurate or incomplete data.
Erasure of your data in the circumstances set out in Article 17.
Restrict processing in the circumstances set out in Article 18.
Data portability — receive data you provided to us in a structured, commonly used, machine-readable format, and have it transmitted to another controller where technically feasible.
Object to processing based on legitimate interests, including profiling. You have an absolute right to object to direct marketing, which we will always honour.
Withdraw consent at any time where we rely on it.
To exercise any of these, contact info@pitchme.co. We will respond within one month, and will tell you if we need to extend that period by up to a further two months because the request is complex. There is no charge unless a request is manifestly unfounded or excessive.
You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk or 0303 123 1113. We would ask you to raise the matter with us first so we can try to resolve it.
13. Cookies
We use cookies and similar technologies. Strictly necessary cookies are set automatically because the Site cannot function without them. All other cookies, including analytics and marketing cookies, are set only after you consent via our cookie banner. Full detail is in our Cookie Policy.
14. Children
The Service is intended for professional use and is not directed to children. We do not knowingly collect personal data from anyone under 21. If you believe we hold data relating to a child, contact info@pitchme.co and we will delete it.
15. Changes to this policy
We may update this policy. The "last updated" date at the top will change. Where a change materially affects how we use your personal data, we will notify account holders in advance by email or through the Service.